Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9eee4d-5b10-45d3-849e-5bb9d1eb0341.roa
File: 2f9eee4d-5b10-45d3-849e-5bb9d1eb0341.roa (raw, json)
Hash identifier: /FDykRCjP06w1cspo0JZwD/xjzM3j/ulVjiKK39J4vU=
Subject key identifier: 8E:50:0E:3B:B8:CA:17:A8:C8:F0:DE:5D:0E:D8:B4:FA:54:C6:45:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F8B95D59CCB9BD04EBEB47F293789E280053971
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9eee4d-5b10-45d3-849e-5bb9d1eb0341.roa
Signing time: Mon 20 Oct 2025 05:50:06 +0000
ROA not before: Mon 20 Oct 2025 05:50:06 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8b:95:d5:9c:cb:9b:d0:4e:be:b4:7f:29:37:89:e2:80:05:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:50:06 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=62f80c772e5f590b3d173be7667be3fa8a26c66a711fa8f6f6a81df56dffbdc3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:20:0c:d5:2d:ca:64:3a:31:25:a4:ca:93:
2e:25:3b:df:ff:8b:8b:10:3e:09:e2:4d:9c:75:b6:
4a:0d:c0:23:26:c3:09:15:fa:d2:5b:f0:b2:fd:cf:
50:d4:3b:96:13:6a:90:ff:4c:cf:d3:65:ab:ce:29:
50:37:a4:5d:e1:83:43:be:8f:e2:2a:cc:17:6c:17:
72:cc:a1:2b:80:89:60:89:d2:9f:92:0f:59:cf:a5:
3a:11:73:ce:af:a9:e2:85:ee:cf:7f:52:cf:92:6c:
a2:c0:4b:5b:24:db:81:74:70:2b:6c:03:d0:a6:21:
52:6c:92:19:d3:6c:5d:0f:07:99:aa:7c:d9:89:a1:
e0:a0:a9:a5:1f:7d:e2:e0:45:8c:22:36:ae:a8:f5:
9a:61:9b:1f:c0:ec:b9:ed:09:e5:ca:0e:ab:83:2a:
36:c3:54:82:d9:00:23:70:0a:5a:c5:b7:be:29:77:
e4:67:a1:d0:4c:1b:6c:26:f9:fb:d2:7f:93:7b:5b:
62:68:1b:5f:52:25:6e:61:4b:76:d1:a9:52:67:63:
a6:51:b7:01:ad:11:27:95:e6:13:b3:4d:02:d6:47:
a3:52:6a:c7:29:bf:e2:66:b6:c1:5d:eb:be:15:27:
3f:a4:b2:35:4d:fe:b1:05:0e:a6:c3:90:0b:9d:c3:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:0E:3B:B8:CA:17:A8:C8:F0:DE:5D:0E:D8:B4:FA:54:C6:45:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9eee4d-5b10-45d3-849e-5bb9d1eb0341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:c3:00:7f:29:05:e0:00:9f:88:9a:98:6e:27:da:df:aa:43:
29:e4:ba:bb:33:91:33:27:d3:48:5c:e9:bf:f9:35:7d:a4:be:
1f:23:22:6f:71:7d:a7:4d:4e:5f:35:4c:df:93:c2:1b:a2:60:
c2:39:eb:1b:a1:f1:8b:4a:7d:2d:57:f9:48:83:e0:d8:2c:2e:
2d:cf:43:91:5e:a9:82:91:28:8e:7e:75:21:2f:d2:55:d6:9e:
73:3b:93:89:bf:42:c0:06:bb:8e:ee:e0:59:df:ba:40:8f:44:
81:d3:5f:82:08:72:61:8e:99:7c:83:af:11:9b:13:a8:c2:25:
c3:d5:46:96:f4:cd:08:e3:4c:37:a0:48:0e:2b:91:02:5c:e1:
bc:a7:84:73:4c:f8:fb:3d:f2:0d:dc:1b:cb:8b:55:34:3d:0a:
b6:66:55:9c:dc:3d:da:d2:88:65:92:85:62:fd:f0:6a:5a:50:
6a:55:08:28:e0:a8:ad:ca:c8:d3:1a:ba:30:a0:2c:df:be:f9:
3c:32:f2:c2:4c:09:bc:60:86:a9:de:cf:fa:e2:05:4d:8d:24:
bb:4b:b7:25:cf:1d:0d:6b:6c:d3:79:53:e8:a3:24:29:3c:17:
6f:87:a5:44:9e:8c:21:3c:40:07:0f:f6:cc:9c:30:a3:51:57:
21:2e:0b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:02 2025 by rpki-client